
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
File: oiK21tBSghQiHUrOpH4axhHvQno.mft (raw, json)
Hash identifier: I4qq7mfgWUtrrTwVd9fxNIqD7K9HFbKILLYBErKpMwE=
Subject key identifier: 85:93:48:BE:34:1B:7C:EC:BD:E9:16:CE:C2:91:54:7C:54:8F:3D:BD
Authority key identifier: A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A
Certificate issuer: /CN=A911F177/serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A
Certificate serial: 086B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
Manifest number: 0863
Signing time: Wed 22 Jul 2026 21:23:01 +0000
Manifest this update: Wed 22 Jul 2026 21:23:01 +0000
Manifest next update: Wed 29 Jul 2026 21:23:01 +0000
Files and hashes: 1: oiK21tBSghQiHUrOpH4axhHvQno.crl (hash: V6++2fQ4oL2lpgBrVmWWzzKi/RvpMqVbDX9//2UVGWc=)
2: 90203ACEDEE811EBA82BEF41C4F9AE02.roa (hash: oot2eMtZy8Bb20t9t+iEwLkFtUPz+/MiX0LVfUtGAbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.crl
rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2155 (0x86b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F177, serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A
Validity
Not Before: Jul 22 21:23:01 2026 GMT
Not After : Jul 29 21:23:01 2026 GMT
Subject: CN=6a6134b5-bfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:1e:f1:6a:be:4d:d6:bd:4e:3b:44:83:b2:
cc:2a:23:ad:66:67:2b:56:d4:1f:15:6f:d8:0f:29:
49:c7:92:e3:55:87:1e:5c:a1:af:00:43:f5:47:a0:
74:69:44:65:23:79:21:6d:60:eb:5a:1f:b9:eb:d8:
46:65:4b:e4:48:de:5e:8b:88:ff:8c:f6:3c:a7:d5:
1b:6d:d1:c2:df:50:20:f4:04:aa:5c:30:85:fd:48:
6f:08:97:84:cd:4c:63:ff:ef:85:d5:b1:c7:89:84:
d1:2b:ee:4c:53:fa:49:5f:92:45:61:bb:75:d0:9d:
0e:4d:31:46:63:21:18:c3:5c:2d:98:6e:9b:29:5c:
c4:3f:b2:3b:a6:80:70:e9:6c:18:ee:12:4e:64:28:
10:a7:77:c8:96:41:55:32:df:12:da:dc:59:c3:17:
21:89:b3:ec:05:21:dc:91:88:67:56:68:6a:b8:43:
c8:af:96:1e:12:3b:04:e5:1a:23:c2:ff:55:8e:26:
30:df:aa:76:61:58:eb:18:8b:6a:9c:55:a8:7e:88:
a5:3b:39:46:57:87:0a:2f:d2:f4:0d:f4:3c:5c:d4:
02:55:53:c6:30:72:f6:8f:31:be:90:57:d8:7e:32:
ab:93:f8:86:8c:5c:9c:64:be:6d:05:ac:b0:4a:80:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:93:48:BE:34:1B:7C:EC:BD:E9:16:CE:C2:91:54:7C:54:8F:3D:BD
X509v3 Authority Key Identifier:
keyid:A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:99:b9:5a:cc:54:6f:e3:57:f8:a0:98:4e:32:80:53:45:ef:
5f:89:c5:2c:6d:cb:2e:85:be:9d:ee:9d:51:0f:c1:24:dc:44:
a9:ee:b4:07:7a:96:ae:e5:64:48:b5:a7:6d:9e:db:d0:9c:a3:
aa:0b:1d:84:0f:55:c0:d4:6a:10:cf:a5:e1:fd:27:37:0b:71:
82:c7:72:2e:26:c1:2f:66:ef:f7:81:4a:66:37:2e:78:72:ce:
f7:26:17:7e:15:5b:c1:ab:b8:32:ef:44:f7:d3:11:0e:8d:7f:
e3:52:fb:f3:d5:78:f8:f9:9b:3f:05:78:67:e5:b6:18:3f:8b:
cf:9e:09:94:62:5b:df:4a:70:59:ff:f5:b7:ba:df:0f:66:98:
ce:63:9d:68:89:17:3a:04:18:aa:c6:5d:e4:33:d9:62:a9:d5:
84:25:88:19:95:76:fc:6b:9a:9a:f4:73:fe:f4:e8:23:76:9c:
a2:ae:74:c2:07:a9:ea:5c:89:53:09:96:a7:b2:47:88:45:af:
cf:83:02:77:8b:2c:7c:ca:f4:f7:bf:9a:9d:20:aa:79:4c:f6:
3e:62:d1:05:3f:a4:04:b7:2d:5f:1d:7b:4d:0e:44:fa:ba:e3:
61:e3:34:ab:ab:af:ec:7c:a3:f7:10:20:60:1d:5a:53:3e:13:
42:93:90:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:39:07 2026 by rpki-client